Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-30190

Password check plugin prevents changing grants for CURRENT_USER

    XMLWordPrintable

Details

    Description

      grant all on db1.* to current_user;
      revoke all on db1.* from current_user;
      install soname 'simple_password_check';
      grant all on db1.* to current_user;
      select current_user;
      grant all on db1.* to root@localhost;
      show grants;
      

      10.4 0174a9ff

      install soname 'simple_password_check';
      grant all on db1.* to current_user;
      mysqltest: At line 4: query 'grant all on db1.* to current_user' failed: 1819: Your password does not satisfy the current policy requirements (simple_password_check)
      select current_user;
      current_user
      root@localhost
      grant all on db1.* to root@localhost;
      show grants;
      Grants for root@localhost
      GRANT ALL PRIVILEGES ON *.* TO `root`@`localhost` WITH GRANT OPTION
      GRANT ALL PRIVILEGES ON `db1`.* TO `root`@`localhost`
      GRANT PROXY ON ''@'%' TO 'root'@'localhost' WITH GRANT OPTION
      

      So, the password check doesn't allow to change grants for the CURRENT_USER. It would be somewhat understandable if it weren't only for CURRENT_USER. If a user is specified by a name, it works.

      Reproducible on 10.4+.

      Attachments

        Activity

          People

            serg Sergei Golubchik
            elenst Elena Stepanova
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.